128.199.145.14

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	May 13 15:02:35 srv01 sshd[5641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.14 user=root May 13 15:02:37 srv01 sshd[5641]: Failed password for root from 128.199.145.14 port 51060 ssh2 May 13 15:04:35 srv01 sshd[5719]: Invalid user xxx from 128.199.145.14 port 13999 May 13 15:04:35 srv01 sshd[5719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.14 May 13 15:04:35 srv01 sshd[5719]: Invalid user xxx from 128.199.145.14 port 13999 May 13 15:04:38 srv01 sshd[5719]: Failed password for invalid user xxx from 128.199.145.14 port 13999 ssh2 ...	2020-05-13 22:36:51

类型

评论内容

时间

attackspambots

May 13 15:02:35 srv01 sshd[5641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.14  user=root
May 13 15:02:37 srv01 sshd[5641]: Failed password for root from 128.199.145.14 port 51060 ssh2
May 13 15:04:35 srv01 sshd[5719]: Invalid user xxx from 128.199.145.14 port 13999
May 13 15:04:35 srv01 sshd[5719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.14
May 13 15:04:35 srv01 sshd[5719]: Invalid user xxx from 128.199.145.14 port 13999
May 13 15:04:38 srv01 sshd[5719]: Failed password for invalid user xxx from 128.199.145.14 port 13999 ssh2
...

2020-05-13 22:36:51

相同子网IP讨论:

IP	类型	评论内容	时间
128.199.145.5	attackbots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-10-10 23:43:22
128.199.145.5	attackbotsspam	2020-10-10T10:00:51.463672paragon sshd[818439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5 2020-10-10T10:00:51.459770paragon sshd[818439]: Invalid user admin from 128.199.145.5 port 48280 2020-10-10T10:00:53.980785paragon sshd[818439]: Failed password for invalid user admin from 128.199.145.5 port 48280 ssh2 2020-10-10T10:04:16.370980paragon sshd[818507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5 user=root 2020-10-10T10:04:18.366052paragon sshd[818507]: Failed password for root from 128.199.145.5 port 45985 ssh2 ...	2020-10-10 15:33:24
128.199.145.5	attackbotsspam	Oct 4 01:54:03 mail sshd[6067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5	2020-10-04 09:06:11
128.199.145.5	attack	(sshd) Failed SSH login from 128.199.145.5 (SG/Singapore/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD	2020-10-04 01:42:53
128.199.145.5	attack	Oct 3 sshd[6783]: Invalid user osmc from 128.199.145.5 port 42210	2020-10-03 17:28:12
128.199.145.5	attackbotsspam	Sep 22 14:56:11 game-panel sshd[8630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5 Sep 22 14:56:13 game-panel sshd[8630]: Failed password for invalid user zj from 128.199.145.5 port 58423 ssh2 Sep 22 15:00:54 game-panel sshd[8882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.5	2020-09-22 23:40:55
128.199.145.5	attackspambots	Unauthorized SSH login attempts	2020-09-22 15:46:26
128.199.145.5	attack	$f2bV_matches	2020-09-22 07:48:45
128.199.145.205	attack	2020-02-21T06:51:10.773086abusebot-3.cloudsearch.cf sshd[2779]: Invalid user mssql from 128.199.145.205 port 36029 2020-02-21T06:51:10.784270abusebot-3.cloudsearch.cf sshd[2779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205 2020-02-21T06:51:10.773086abusebot-3.cloudsearch.cf sshd[2779]: Invalid user mssql from 128.199.145.205 port 36029 2020-02-21T06:51:13.162908abusebot-3.cloudsearch.cf sshd[2779]: Failed password for invalid user mssql from 128.199.145.205 port 36029 ssh2 2020-02-21T06:58:40.060147abusebot-3.cloudsearch.cf sshd[3148]: Invalid user michael from 128.199.145.205 port 45993 2020-02-21T06:58:40.072780abusebot-3.cloudsearch.cf sshd[3148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205 2020-02-21T06:58:40.060147abusebot-3.cloudsearch.cf sshd[3148]: Invalid user michael from 128.199.145.205 port 45993 2020-02-21T06:58:41.562901abusebot-3.cloudsearch.cf sshd[314 ...	2020-02-21 15:12:34
128.199.145.196	attackbots	Jan 28 15:29:06 ourumov-web sshd\[27949\]: Invalid user usri from 128.199.145.196 port 32824 Jan 28 15:29:06 ourumov-web sshd\[27949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.196 Jan 28 15:29:08 ourumov-web sshd\[27949\]: Failed password for invalid user usri from 128.199.145.196 port 32824 ssh2 ...	2020-01-28 23:17:01
128.199.145.205	attackbotsspam	Jan 27 10:24:13 hcbbdb sshd\[22981\]: Invalid user rob from 128.199.145.205 Jan 27 10:24:13 hcbbdb sshd\[22981\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205 Jan 27 10:24:14 hcbbdb sshd\[22981\]: Failed password for invalid user rob from 128.199.145.205 port 48958 ssh2 Jan 27 10:29:17 hcbbdb sshd\[23647\]: Invalid user jeremy from 128.199.145.205 Jan 27 10:29:17 hcbbdb sshd\[23647\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205	2020-01-27 18:32:38
128.199.145.205	attackbotsspam	Dec 8 09:40:51 cvbnet sshd[23083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205 Dec 8 09:40:53 cvbnet sshd[23083]: Failed password for invalid user radubarsan from 128.199.145.205 port 59125 ssh2 ...	2019-12-08 22:24:02
128.199.145.205	attack	2019-12-07T11:03:50.201945abusebot-2.cloudsearch.cf sshd\[15013\]: Invalid user rokny from 128.199.145.205 port 50133 2019-12-07T11:03:50.205695abusebot-2.cloudsearch.cf sshd\[15013\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.145.205	2019-12-07 20:35:30
128.199.145.205	attack	Dec 2 21:34:36 *** sshd[16663]: Invalid user delat from 128.199.145.205	2019-12-03 06:44:18
128.199.145.205	attackspam	SSH Brute Force, server-1 sshd[5043]: Failed password for invalid user jjjj from 128.199.145.205 port 41843 ssh2	2019-11-23 01:49:38

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 128.199.145.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54178
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;128.199.145.14.			IN	A

;; AUTHORITY SECTION:
.			488	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051300 1800 900 604800 86400

;; Query time: 122 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 13 22:36:46 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 14.145.199.128.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.145.199.128.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
119.27.189.222	attackspambots	Jul 26 19:34:12 webhost01 sshd[23905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.27.189.222 Jul 26 19:34:14 webhost01 sshd[23905]: Failed password for invalid user pentaho from 119.27.189.222 port 50920 ssh2 ...	2019-07-26 20:35:41
185.93.3.113	attackspambots	(From raphaeCealpilleher@gmail.com) Ciao! rbchiro.com We propose Sending your message through the Contact us form which can be found on the sites in the contact section. Contact form are filled in by our software and the captcha is solved. The advantage of this method is that messages sent through feedback forms are whitelisted. This technique increases the probability that your message will be open. Our database contains more than 25 million sites around the world to which we can send your message. The cost of one million messages 49 USD FREE TEST mailing of 50,000 messages to any country of your choice. This message is automatically generated to use our contacts for communication. Contact us. Telegram - @FeedbackFormEU Skype FeedbackForm2019 Email - FeedbackForm@make-success.com WhatsApp - +44 7598 509161	2019-07-26 21:00:13
160.20.247.73	attackbotsspam	Jul 26 14:06:33 meumeu sshd[23462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.20.247.73 Jul 26 14:06:36 meumeu sshd[23462]: Failed password for invalid user test from 160.20.247.73 port 40388 ssh2 Jul 26 14:12:05 meumeu sshd[24222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=160.20.247.73 ...	2019-07-26 20:25:44
37.73.179.160	attackspambots	Jul 26 11:01:08 xeon postfix/smtpd[13863]: NOQUEUE: reject: RCPT from unknown[37.73.179.160]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[37.73.179.160]>	2019-07-26 20:39:22
58.144.151.8	attack	26.07.2019 13:03:40 SSH access blocked by firewall	2019-07-26 21:06:28
171.229.240.94	attackspam	DATE:2019-07-26_12:43:57, IP:171.229.240.94, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-07-26 20:53:37
145.239.227.21	attackbots	Jul 26 14:08:50 OPSO sshd\[601\]: Invalid user axel from 145.239.227.21 port 43534 Jul 26 14:08:50 OPSO sshd\[601\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.227.21 Jul 26 14:08:51 OPSO sshd\[601\]: Failed password for invalid user axel from 145.239.227.21 port 43534 ssh2 Jul 26 14:14:25 OPSO sshd\[1879\]: Invalid user confluence from 145.239.227.21 port 39232 Jul 26 14:14:25 OPSO sshd\[1879\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.227.21	2019-07-26 20:26:14
62.210.249.18	attack	WP_xmlrpc_attack	2019-07-26 20:41:46
185.10.68.183	attack	firewall-block, port(s): 9443/tcp	2019-07-26 21:07:02
184.168.46.170	attackbotsspam	WP_xmlrpc_attack	2019-07-26 21:00:45
38.76.31.46	attackspambots	C1,WP GET /nelson/www/wp-includes/wlwmanifest.xml	2019-07-26 20:47:47
67.205.163.48	attackbotsspam	CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2019-07-26 21:03:22
36.239.122.127	attack	:	2019-07-26 20:33:23
101.36.160.50	attackspam	DATE:2019-07-26 13:14:17, IP:101.36.160.50, PORT:ssh brute force auth on SSH service (patata)	2019-07-26 21:11:32
14.102.50.67	attack	Unauthorized connection attempt from IP address 14.102.50.67 on Port 445(SMB)	2019-07-26 21:08:39

最近上报的IP列表

194.58.98.58	64.54.159.28	89.204.154.239	46.140.182.8
62.234.103.191	62.122.97.5	78.36.13.133	213.90.36.44
162.243.143.105	202.21.124.28	87.190.16.229	111.230.180.65
74.6.133.235	117.81.151.166	54.36.148.128	52.151.10.196
114.109.33.247	217.234.250.206	202.62.9.132	194.147.78.204